Ac10 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:ac10_firmware:16.03.10.10_multi_tde01:*:*:*:*:*:*:*
part: o version: 16.03.10.10_multi_tde01 update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ac10 Firmware (94e82633-7927-50d3-8a69-db323ba3260b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5550 |
vulnerable | 2026-06-08 08:07:03.823195 |
Tenda AC10 httpd fromSysToolChangePwd stack-based overflow
HIGH (8.8)
A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.
Published: 2026-04-05T08:00:20.639Z
Updated: 2026-04-07T02:43:36.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5549 |
vulnerable | 2026-06-08 08:07:03.822658 |
Tenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key
MEDIUM (5.3)
A vulnerability was determined in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this issue is some unknown functionality of the file /webroot_ro/pem/privkeySrv.pem of the component RSA 2048-bit Private Key Handler. Executing a manipulation can lead to use of hard-coded cryptographic key
. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-05T07:45:14.628Z
Updated: 2026-04-06T16:21:09.043Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5548 |
vulnerable | 2026-06-08 08:07:03.820715 |
Tenda AC10 httpd fromSysToolChangePwd stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely.
Published: 2026-04-05T07:30:15.665Z
Updated: 2026-04-06T17:57:47.036Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5547 |
vulnerable | 2026-06-08 08:07:03.819078 |
Tenda AC10 httpd formAddMacfilterRule os command injection
MEDIUM (6.3)
A vulnerability has been found in Tenda AC10 16.03.10.10_multi_TDE01. Affected is the function formAddMacfilterRule of the file /bin/httpd. Such manipulation leads to os command injection. It is possible to launch the attack remotely. Multiple endpoints might be affected.
Published: 2026-04-05T07:15:15.874Z
Updated: 2026-04-06T14:51:06.247Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.